Details
-
Type:
Bug
-
Status: Open (View Workflow)
-
Priority:
Critical
-
Resolution: Unresolved
-
Component/s: checkmarx-plugin
-
Labels:
-
Similar Issues:
Description
CheckMarx stopped working this afternoon. It had been working in the morning.
Some Plugins where updated during this time period by CheckMarx (8.90.1) was not.
step([$class : 'CxScanBuilder', avoidDuplicateProjectScans : false, comment : "Pipeline Scan", credentialsId : 'checkmarx', excludeFolders : '', exclusionsSetting : 'global', failBuildOnNewResults : true, failBuildOnNewSeverity : 'HIGH', fullScanCycle : 10, generatePdfReport : true, groupId : 'XXXXX', osaArchiveIncludePatterns : '*.zip, *.war, *.ear, *.tgz', osaInstallBeforeScan : false, preset : '100003', projectName : "${serviceName}${CHECKMARX_PROJECT_TYPE}", sastEnabled : true, sourceEncoding : '1', vulnerabilityThresholdResult : 'FAILURE' ])
java.lang.SecurityException: Rejected: com.cx.restclient.dto.ScanResults; see https://jenkins.io/redirect/class-filter/ at hudson.remoting.ClassFilter.check(ClassFilter.java:77) at hudson.remoting.MultiClassLoaderSerializer$Input.resolveClass(MultiClassLoaderSerializer.java:135) at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1867) at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1750) at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2041) at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1572) at java.io.ObjectInputStream.readObject(ObjectInputStream.java:430) at hudson.remoting.UserRequest.deserialize(UserRequest.java:291) at hudson.remoting.UserRequest$NormalResponse.retrieve(UserRequest.java:326) at hudson.remoting.Channel.call(Channel.java:955) Caused: java.io.IOException: Failed to deserialize response to UserRequest:com.checkmarx.jenkins.CxScanCallable@40fec119 at hudson.remoting.Channel.call(Channel.java:963) at hudson.FilePath.act(FilePath.java:1072) at hudson.FilePath.act(FilePath.java:1061) at com.checkmarx.jenkins.CxScanBuilder.perform(CxScanBuilder.java:711) at org.jenkinsci.plugins.workflow.steps.CoreStep$Execution.run(CoreStep.java:80) at org.jenkinsci.plugins.workflow.steps.CoreStep$Execution.run(CoreStep.java:67) at org.jenkinsci.plugins.workflow.steps.SynchronousNonBlockingStepExecution.lambda$start$0(SynchronousNonBlockingStepExecution.java:47) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:748)
Attachments
Issue Links
- relates to
-
JENKINS-47736
JEP-200: Switch Remoting/XStream blacklist to a whitelist
-
- Resolved
-
Activity
Problem has been fixed.
A new version 8.90.3 was uploaded to the Jenkins Update Center
Our apologies and thank you for sharing this issue,
Checkmarx Product Manager
I have upgraded chekmarx to 8.90.3 and my build got succeed but again it started failing because of same reason.
here is the log,
FATAL: java.lang.RuntimeException: Failed to serialize hudson.model.Project#builders for class hudson.model.FreeStyleProject*17:01:44* java.lang.UnsupportedOperationException: Refusing to marshal java.io.PrintStream for security reasons; see
https://jenkins.io/redirect/class-filter/
17:01:44 at hudson.util.XStream2$BlacklistedTypesConverter.marshal(XStream2.java:543)17:01:44 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)17:01:44 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)17:01:44 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)17:01:44 at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)17:01:44 at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)17:01:44 Caused: java.lang.RuntimeException: Failed to serialize com.checkmarx.jenkins.CxLoggerAdapter#log for class com.checkmarx.jenkins.CxLoggerAdapter*17:01:44* at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)17:01:44 at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)17:01:44 at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)17:01:44 at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)17:01:44 at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)17:01:44 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)17:01:44 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)17:01:44 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)17:01:44 at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)17:01:44 at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)17:01:44 Caused: java.lang.RuntimeException: Failed to serialize com.checkmarx.jenkins.CxScanBuilder#log for class com.checkmarx.jenkins.CxScanBuilder*17:01:44* at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)17:01:44 at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)17:01:44 at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)17:01:44 at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)17:01:44 at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)17:01:44 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)17:01:44 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)17:01:44 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43)17:01:44 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:88)17:01:44 at com.thoughtworks.xstream.converters.collections.AbstractCollectionConverter.writeItem(AbstractCollectionConverter.java:64)17:01:44 at hudson.util.DescribableList$ConverterImpl.marshal(DescribableList.java:269)17:01:44 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)17:01:44 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)17:01:44 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)17:01:44 at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)17:01:44 at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)17:01:44 Caused: java.lang.RuntimeException: Failed to serialize hudson.model.Project#builders for class hudson.model.FreeStyleProject*17:01:44* at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)17:01:44 at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)17:01:44 at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)17:01:44 at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)17:01:44 at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)17:01:44 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)17:01:44 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)17:01:44 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43)17:01:44 at com.thoughtworks.xstream.core.TreeMarshaller.start(TreeMarshaller.java:82)17:01:44 at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.marshal(AbstractTreeMarshallingStrategy.java:37)17:01:44 at com.thoughtworks.xstream.XStream.marshal(XStream.java:1026)17:01:44 at com.thoughtworks.xstream.XStream.marshal(XStream.java:1015)17:01:44 at com.thoughtworks.xstream.XStream.toXML(XStream.java:988)17:01:44 at hudson.XmlFile.write(XmlFile.java:193)17:01:44 Caused: java.io.IOException*17:01:44* at hudson.XmlFile.write(XmlFile.java:200)17:01:44 at hudson.model.AbstractItem.save(AbstractItem.java:597)17:01:44 at hudson.model.Job.save(Job.java:191)17:01:44 at hudson.model.AbstractProject.save(AbstractProject.java:289)17:01:44 at jenkins.model.ParameterizedJobMixIn$ParameterizedJob.makeDisabled(ParameterizedJobMixIn.java:484)17:01:44 at hudson.model.AbstractProject.performDelete(AbstractProject.java:354)17:01:44 at hudson.model.AbstractItem.delete(AbstractItem.java:772)17:01:44 at hudson.model.Job.delete(Job.java:677)17:01:44 at javaposse.jobdsl.plugin.ExecuteDslScripts.updateGeneratedJobs(ExecuteDslScripts.java:429)17:01:44 at javaposse.jobdsl.plugin.ExecuteDslScripts.perform(ExecuteDslScripts.java:330)17:01:44 at hudson.tasks.BuildStepCompatibilityLayer.perform(BuildStepCompatibilityLayer.java:81)17:01:44 at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:20)17:01:44 at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:744)17:01:44 at hudson.model.Build$BuildExecution.build(Build.java:206)17:01:44 at hudson.model.Build$BuildExecution.doRun(Build.java:163)17:01:44 at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:504)17:01:44 at hudson.model.Run.execute(Run.java:1794)17:01:44 at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)17:01:44 at hudson.model.ResourceController.execute(ResourceController.java:97)17:01:44 at hudson.model.Executor.run(Executor.java:429)
Hello
We have just uploaded 8.90.4 which should fix an additional case of "Failed to serialize...". We hope this will fix the problem you are facing. It should be on the site within 1-2 days.
I'd appreciate if you share your experience with that plugin version.
I apologize for the inconvenience, Liran
That worked for me. Thank you very much for fixing it. We had a successful build for the first time. 
Hi,
I am also facing issue for checkmarx plugin.
build log is here
please let me know any workaround
FATAL: java.lang.RuntimeException: Failed to serialize hudson.model.Project#builders for class hudson.model.FreeStyleProject*13:27:58* java.lang.UnsupportedOperationException: Refusing to marshal java.io.PrintStream for security reasons; see
https://jenkins.io/redirect/class-filter/
13:27:58 at hudson.util.XStream2$BlacklistedTypesConverter.marshal(XStream2.java:543)13:27:58 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)13:27:58 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)13:27:58 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)13:27:58 at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)13:27:58 at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)13:27:58 Caused: java.lang.RuntimeException: Failed to serialize com.checkmarx.jenkins.CxLoggerAdapter#log for class com.checkmarx.jenkins.CxLoggerAdapter*13:27:58* at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)13:27:58 at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)13:27:58 at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)13:27:58 at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)13:27:58 at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)13:27:58 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)13:27:58 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)13:27:58 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)13:27:58 at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)13:27:58 at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)13:27:58 Caused: java.lang.RuntimeException: Failed to serialize com.checkmarx.jenkins.CxScanBuilder#log for class com.checkmarx.jenkins.CxScanBuilder*13:27:58* at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)13:27:58 at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)13:27:58 at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)13:27:58 at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)13:27:58 at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)13:27:58 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)13:27:58 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)13:27:58 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43)13:27:58 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:88)13:27:58 at com.thoughtworks.xstream.converters.collections.AbstractCollectionConverter.writeItem(AbstractCollectionConverter.java:64)13:27:58 at hudson.util.DescribableList$ConverterImpl.marshal(DescribableList.java:269)13:27:58 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)13:27:58 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)13:27:58 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)13:27:58 at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)13:27:58 at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)13:27:58 Caused: java.lang.RuntimeException: Failed to serialize hudson.model.Project#builders for class hudson.model.FreeStyleProject*13:27:58* at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)13:27:58 at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)13:27:58 at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)13:27:58 at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)13:27:58 at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)13:27:58 at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)13:27:58 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)13:27:58 at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43)13:27:58 at com.thoughtworks.xstream.core.TreeMarshaller.start(TreeMarshaller.java:82)13:27:58 at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.marshal(AbstractTreeMarshallingStrategy.java:37)13:27:58 at com.thoughtworks.xstream.XStream.marshal(XStream.java:1026)13:27:58 at com.thoughtworks.xstream.XStream.marshal(XStream.java:1015)13:27:58 at com.thoughtworks.xstream.XStream.toXML(XStream.java:988)13:27:58 at hudson.XmlFile.write(XmlFile.java:193)13:27:58 Caused: java.io.IOException*13:27:58* at hudson.XmlFile.write(XmlFile.java:200)13:27:58 at hudson.model.AbstractItem.save(AbstractItem.java:597)13:27:58 at hudson.model.Job.save(Job.java:191)13:27:58 at hudson.model.AbstractProject.save(AbstractProject.java:289)13:27:58 at jenkins.model.ParameterizedJobMixIn$ParameterizedJob.makeDisabled(ParameterizedJobMixIn.java:484)13:27:58 at hudson.model.AbstractProject.performDelete(AbstractProject.java:354)13:27:58 at hudson.model.AbstractItem.delete(AbstractItem.java:772)13:27:58 at hudson.model.Job.delete(Job.java:677)13:27:58 at javaposse.jobdsl.plugin.ExecuteDslScripts.updateGeneratedJobs(ExecuteDslScripts.java:429)13:27:58 at javaposse.jobdsl.plugin.ExecuteDslScripts.perform(ExecuteDslScripts.java:330)13:27:58 at hudson.tasks.BuildStepCompatibilityLayer.perform(BuildStepCompatibilityLayer.java:81)13:27:58 at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:20)13:27:58 at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:744)13:27:58 at hudson.model.Build$BuildExecution.build(Build.java:206)13:27:58 at hudson.model.Build$BuildExecution.doRun(Build.java:163)13:27:58 at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:504)13:27:58 at hudson.model.Run.execute(Run.java:1794)13:27:58 at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)13:27:58 at hudson.model.ResourceController.execute(ResourceController.java:97)13:27:58 at hudson.model.Executor.run(Executor.java:429)